Skip to content

SECURITY.md

Latest commit

 

History

History
13 lines (9 loc) · 892 Bytes

SECURITY.md

File metadata and controls

13 lines (9 loc) · 892 Bytes
Raw

Security policy

Safe operation

  • Keep AdsPower LocalAPI bound to the local machine or another explicitly trusted network boundary.
  • Supply LocalAPI credentials through ADSPOWER_API_KEY; never commit keys or place them in CLI arguments.
  • Do not commit .adspower-safe-reports/, cookies, proxy credentials, browser profile data, or real tracking URLs.
  • Review reports before sharing. URL query values are redacted, but profile identity and local filesystem paths can still be operationally sensitive.
  • Run tests only against profiles and URLs you are authorized to use.

Reporting a vulnerability

Please use this repository's GitHub Security → Report a vulnerability flow instead of opening a public Issue. Include the affected version, a minimal reproduction, impact, and a proposed mitigation if known. Do not include live credentials or private browser-profile data.